You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ranger.apache.org by dilli dorai <di...@gmail.com> on 2015/04/03 19:27:29 UTC

Review Request 32821: RANGER-369: ranger agent connection to ssl enabled ranger admin fails

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/32821/
-----------------------------------------------------------

Review request for ranger, Alok Lal, Madhan Neethiraj, and Ramesh Mani.


Bugs: RANGER-369
    https://issues.apache.org/jira/browse/RANGER-369


Repository: ranger


Description
-------

RANGER-369: ranger agent connection to ssl enabled ranger admin fails

Ranger agent connection to ssl enabled ranger admin fails.
The root cause is mismatched names between config parameter name in service def json file and parameter name used in org.apache.ranger.common.ServiceUtil.java
service def file uses config param name: 
certificate.cn
ServiceUtil looks up by param name: 
commonNameForCertificate
We have to use consistent name

Changing all the servive def json file to use param name:
commonNameForCertificate


Diffs
-----

  agents-common/src/main/resources/service-defs/ranger-servicedef-hbase.json 42fb502 
  agents-common/src/main/resources/service-defs/ranger-servicedef-hdfs.json a37d549 
  agents-common/src/main/resources/service-defs/ranger-servicedef-hive.json 27bd40f 
  agents-common/src/main/resources/service-defs/ranger-servicedef-kafka.json 11b5d15 
  agents-common/src/main/resources/service-defs/ranger-servicedef-knox.json 894b976 
  agents-common/src/main/resources/service-defs/ranger-servicedef-solr.json 793ec28 
  agents-common/src/main/resources/service-defs/ranger-servicedef-storm.json 3a00276 
  agents-common/src/main/resources/service-defs/ranger-servicedef-yarn.json e0a18da 

Diff: https://reviews.apache.org/r/32821/diff/


Testing
-------

Reproduced the problem using knox agent trying to download policies from ssl enabled ranger admin.

Verified the problem is fixed using knox agent trying to download policies from ssl enabled ranger admin.


Thanks,

dilli dorai


Re: Review Request 32821: RANGER-369: ranger agent connection to ssl enabled ranger admin fails

Posted by Madhan Neethiraj <ma...@apache.org>.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/32821/#review78804
-----------------------------------------------------------

Ship it!


Ship It!

- Madhan Neethiraj


On April 3, 2015, 5:27 p.m., dilli dorai wrote:
> 
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/32821/
> -----------------------------------------------------------
> 
> (Updated April 3, 2015, 5:27 p.m.)
> 
> 
> Review request for ranger, Alok Lal, Madhan Neethiraj, and Ramesh Mani.
> 
> 
> Bugs: RANGER-369
>     https://issues.apache.org/jira/browse/RANGER-369
> 
> 
> Repository: ranger
> 
> 
> Description
> -------
> 
> RANGER-369: ranger agent connection to ssl enabled ranger admin fails
> 
> Ranger agent connection to ssl enabled ranger admin fails.
> The root cause is mismatched names between config parameter name in service def json file and parameter name used in org.apache.ranger.common.ServiceUtil.java
> service def file uses config param name: 
> certificate.cn
> ServiceUtil looks up by param name: 
> commonNameForCertificate
> We have to use consistent name
> 
> Changing all the servive def json file to use param name:
> commonNameForCertificate
> 
> 
> Diffs
> -----
> 
>   agents-common/src/main/resources/service-defs/ranger-servicedef-hbase.json 42fb502 
>   agents-common/src/main/resources/service-defs/ranger-servicedef-hdfs.json a37d549 
>   agents-common/src/main/resources/service-defs/ranger-servicedef-hive.json 27bd40f 
>   agents-common/src/main/resources/service-defs/ranger-servicedef-kafka.json 11b5d15 
>   agents-common/src/main/resources/service-defs/ranger-servicedef-knox.json 894b976 
>   agents-common/src/main/resources/service-defs/ranger-servicedef-solr.json 793ec28 
>   agents-common/src/main/resources/service-defs/ranger-servicedef-storm.json 3a00276 
>   agents-common/src/main/resources/service-defs/ranger-servicedef-yarn.json e0a18da 
> 
> Diff: https://reviews.apache.org/r/32821/diff/
> 
> 
> Testing
> -------
> 
> Reproduced the problem using knox agent trying to download policies from ssl enabled ranger admin.
> 
> Verified the problem is fixed using knox agent trying to download policies from ssl enabled ranger admin.
> 
> 
> Thanks,
> 
> dilli dorai
> 
>